In which case would a controller who has undertaken a DPIA most likely need to consult with a supervisory authority?

• A.Where the DPIA identifies that personal data needs to be transferred to other countries outside of the EEA.
• B.Where the DPIA identifies that the processing being proposed collects the sensitive data of EU citizens.
• C.Where the DPIA identifies risks that will require insurance for protecting its business interests.
• D.Where the DPIA identifies high risks to individuals' rights and freedoms that the controller can take steps to reduce.

Comment: *

Name: *

Email: *

Verification: *

A homeowner has installed a motion-detecting surveillance system that films his front doc and entryway. The camera does not film any public areas only areas that are the property of the homeowner. The system has seen declared to the authorities per the homeowner's country law, and a placard indicating the area is being video monitored is visible when entering the property Why can the homeowner NOT depend on the household exemption with regards to the processing of the video images recorded by the surveillance camera system?

• A.The homeowner has not specified which security measures ore in place as part of the surveillance camera system
• B.The GDPR specifically excludes surveillance camera images from the household exemption
• C.The surveillance camera system can potentially capture biometric information of the homeowner's family, which would be considered a processing of special categories of personal data.
• D.The surveillance camera system can potentially film individuals who enter its filming perimeter

Comment: *

Name: *

Email: *

Verification: *

Article 29 Working Party has emphasized that the GDPR forbids "forum shopping", which occurs when companies do what?

• A.Choose the data protection officer that is most sympathetic to their business concerns.
• B.Designate their main establishment in member state with the most flexible practices.
• C.File appeals of infringement judgments with more than one EU institution simultaneously.
• D.Select third-party processors on the basis of cost rather than quality of privacy protection.

Comment: *

Name: *

Email: *

Verification: *

To receive a preliminary interpretation on provisions of the GDPR, a national court will refer its case to which of the following?

• A.The Court of Justice of the European Union.
• B.The European Data Protection Supervisor.
• C.The European Court of Human Rights.
• D.The European Data Protection Board.

Comment: *

Name: *

Email: *

Verification: *

A company plans to transfer employee health information between two of its entities in France. To maintain the security of the processing, what would be the most important security measure to apply to the health data transmission?

• A.Encrypt the transferred data in transit and at rest.
• B.Inform the data subject of the security measures in place.
• C.Conduct a data protection impact assessment.
• D.Ensure that the receiving entity has signed a data processing agreement.

Comment: *

Name: *

Email: *

Verification: *